To support effective risk decision making, which of the following is MOST important to have in place?

The correct answer is D. Risk reporting procedures. Effective risk decisions require timely, consistent, and actionable information. Risk reporting procedures ensure risks are identified, communicated, escalated, and tracked in a structured way so decision-makers have what they need to accept, mitigate, transfer, or avoid risk.

Submitted by akirajp· Apr 18, 2026Information Security Risk Management

Question

Options

AWell-defined and approved controls
BAn audit committee consisting of mid-level management
CEstablished risk domains
DRisk reporting procedures

How the community answered

(61 responses)

A
10% (6)
B
3% (2)
C
5% (3)
D
82% (50)

Explanation

Effective risk decisions require timely, consistent, and actionable information. Risk reporting procedures ensure risks are identified, communicated, escalated, and tracked in a structured way so decision-makers have what they need to accept, mitigate, transfer, or avoid risk.

Topics

#Risk reporting#Decision making#Risk communication#Risk management process

Community Discussion

No community discussion yet for this question.

Full CISM Practice